Security researchers at Zenity Labs uncovered a credential-stealing campaign on skills.sh, a public registry of add-ons for AI agents run by Vercel. They unveiled the research at the Black Hat conference. Attackers had cloned real skills into typosquat…
What if your AI agent suddenly turned rogue and sent all your passwords to a hacker?
Framework told “all” of its customers that hackers accessed their names, email addresses, phone numbers, and physical addresses in a data breach.
BlackFile (now known as Redact) has been busy, raking in more than $10 milllion since the start of the year.
In the Kimi test, the sandbox designed to contain the experiment was not properly configured.
Huntress spotted a white whale – a malicious toolkit stored as a database object.
No one has claimed the attack yet.
Security researchers tracked and eavesdropped on a WIRED reporter using vulnerabilities in a pink plastic smartwatch. It’s just one piece of a deeply insecure supply chain of GPS-enabled gadgets.
Groups of hackers are breaking into large U.S. financial firms to steal sensitive data and extort victims, Google’s security researchers report.
Researchers linked the latest malicious activity to a Chinese company, after one of the spyware’s operators placed an order with KFC using their real name and office address.